Customer about:
Starting as a system implementation specialist for financial institutions, SMBs, Saltware is a SW professional company focused on solution development and IT consulting, providing business integration platform services based on EP solutions to the public sector and to all enterprises. In delivering business-integrated platform services, it was important to build a fast IT environment and combine it with customer service, along with reliability, cost, and compliance for the B2B business.

Challenge:
Webshell is a Script consisted of Web Programming language. It is a powerful hacking tool that can execute remote command after uploading through vulnerabilities of the Web Server and causes secondary damage such as leakage of Web Server data and internal (personal) information. Saltware was looking for a way to protect the WEB / WAS system from the web shell while building the system for SMB companies. SKInfosec has developed a web shell detection system to address these challenges. In addition, we provided control services with the solution, enabling our Saltware customers to deliver secure WEB services. In the past, similar solutions were custom built and costly. SK Infosec’s webshell detect systems, however, are easy to implement, low cost, and scalable. This provides an opportunity for SMB companies with limited time and resources to provide secure and uniform WEB services. In addition, they are used SK Infosec's Managed Cloud Security Service for security stability of operation and responding to infringement incidents. To this end, the customer built an anti-webshell solution to protect the web contents and selected SKInfosec Managed Cloud Security Service as the 24X365 security control service to build and operate a secure service environment.

How Saltware solved it with Anti-webshell Solution:
We have built an optimal webshell detection system for web services built on AWS and have improved efficiency and functionality. Anti-Webshell solution detects and isolates webshell inserted into web server in real time. This effectively increased the safety of web services. If security incident occures, We'll perform a swift analysis and response. also, SKInfosec established group response system for continuous intension of security level and management plan for security threat. In this project, it was necessary to secure the stability of the security service while enabling casual services considering the characteristics of WEB services. In order to meet these requirements, it was important to establish a countermeasure against possible security threats while providing services. To this end, the customer built an anti-webshell solution to protect the web contents and selected SKInfosec Managed Cloud Security Service as the 24X365 security control service to build and operate a secure service environment.
Impacts include the following:
- Provide secure web service
- Reduced downtime of web services
- Reduced damage that can be caused by Webshell

Customer About:
Youngwoo Digital is a total IT solution vendor that continuously adds various IT products to pursue convergence and combines HW distribution as well as more advanced technical services, networks and solutions. We provide comprehensive cloud services, including hybrid cloud construction consulting services for companies looking to build a cloud. Youngwoo Digital was important to build a fast IT environment and combine it with customer service, along with reliability, cost and compliance and security for delivering Total IT solutions and providing multiple cloud services such as AWS, KT U Cloud and VMWare Cloud.

Challenge:
Youngwoo Digital has used web shell detection system of other products to provide web services to customers safely. However, existing web shell detection solutions were not supported by AWS, so customers who migrated to AWS could not provide a secure WEB service environment. So, to protect web contents in AWS environment, we chose SKinfosec's webshell detection solution, Anti-Webshell solution. In addition, they are used SK Infosec Managed Cloud Security Service for security stability of operation and responding to infringement incidents.

How Youngwoo Digital solved it with Anti-Webshell Solution:
We have built an anti-webshell solution, a web shell detection system specialized for AWS, for web services in the AWS environment. Anti-Webshell detects and isolates the webshell inserted into the web server in real time. This effectively increased the safety of AWS-based web services. If security incident occures, We'll perform a swift analysis and response. also, Infosec established group response system for continuous intension of security level and management plan for security threat. In this project, it was necessary to secure the stability of the security service while enabling casual services considering the characteristics of AWS. In order to meet these requirements, it was important to establish a countermeasure against possible security threats while providing services. To this end, the customer built an anti-webshell solution to protect the web contents and selected SKInfosec Managed Cloud Security Service as the 24X365 security control service to build and operate a secure service environment.